This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
File:                     _edsqF6WVBpa3Tysrx5eEU-qR-8.mft (raw, json)
Hash identifier:          B/RpIMnfrF9F7LgM9NlXPwdmR53tNgdIffm2P76Up9g=
Subject key identifier:   1B:94:6B:07:A9:60:A1:91:A2:10:B1:D5:0B:CB:98:90:49:40:03:65
Authority key identifier: FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF
Certificate issuer:       /CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
Certificate serial:       019B4AA7F77237C50BF1E032D18529F1EE35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
Manifest number:          08C6
Signing time:             Tue 23 Dec 2025 10:01:20 +0000
Manifest this update:     Tue 23 Dec 2025 10:01:20 +0000
Manifest next update:     Wed 24 Dec 2025 10:01:20 +0000
Files and hashes:         1: KFrROomQMJBnIrzsgZU84yvQLdQ.roa (hash: CshrhqcbJrkLcDCTTw3Y7CjvQ9onI+0d2hk5a/aWW9U=)
                          2: _edsqF6WVBpa3Tysrx5eEU-qR-8.crl (hash: P7PvE7BBXM120rBkvyoV+evHHPijMCDotBP1eDkIBrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Dec 2025 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:4a:a7:f7:72:37:c5:0b:f1:e0:32:d1:85:29:f1:ee:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde76ca85e96541a5add3cacaf1e5e114faa47ef
        Validity
            Not Before: Dec 23 10:01:20 2025 GMT
            Not After : Dec 24 10:01:20 2025 GMT
        Subject: CN=1b946b07a960a191a210b1d50bcb989049400365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:19:01:d6:f3:16:fd:16:dd:32:bf:ac:87:82:
                    73:47:23:65:f5:83:8c:7e:3c:2d:58:6e:84:cb:65:
                    01:df:ff:2f:97:da:e0:ae:c6:12:6e:7b:f3:88:ed:
                    ef:16:65:69:5e:75:dd:25:20:b0:01:80:be:ea:84:
                    f0:71:c3:a0:33:9c:54:d8:61:f6:22:0b:b7:b8:9d:
                    6c:61:6c:2d:98:4e:79:71:80:ad:bc:e3:b0:fe:59:
                    5d:4b:8a:2a:5c:70:a4:e3:11:2b:35:7a:79:7a:58:
                    ee:f4:ef:dc:51:bd:e8:3a:ab:06:37:4b:9d:f9:72:
                    98:33:9c:bf:6f:45:be:43:24:29:18:d1:e8:4d:a9:
                    d1:71:88:22:a5:b0:7a:b8:2b:fa:85:8b:5a:5a:89:
                    2f:7f:31:51:66:26:ed:49:c8:5a:e8:85:dc:0e:02:
                    4f:76:c3:1d:cb:1a:85:91:e5:21:1f:ca:82:50:0f:
                    07:2f:a3:c1:a1:d1:99:32:fa:14:18:86:1f:3d:e2:
                    48:25:05:25:49:61:da:a1:be:35:2e:f2:5d:85:c4:
                    93:c9:41:ac:e0:9c:7a:d4:e7:a2:ae:c3:51:00:ac:
                    4e:a0:ac:5c:86:66:f7:f0:1d:ad:b2:bf:fe:ff:26:
                    f4:57:b6:16:c0:ae:d9:74:63:d9:62:18:87:bd:9f:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:94:6B:07:A9:60:A1:91:A2:10:B1:D5:0B:CB:98:90:49:40:03:65
            X509v3 Authority Key Identifier:
                keyid:FD:E7:6C:A8:5E:96:54:1A:5A:DD:3C:AC:AF:1E:5E:11:4F:AA:47:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_edsqF6WVBpa3Tysrx5eEU-qR-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f852ac-9e98-45b7-877f-229e2cb0f66c/1/_edsqF6WVBpa3Tysrx5eEU-qR-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:f7:3f:ca:d2:54:53:45:84:d0:cd:46:7a:31:cf:46:08:9b:
         57:9d:36:38:3d:96:a5:5a:0e:34:20:9b:d3:e7:2b:bb:47:05:
         df:e1:69:c1:85:20:13:d1:46:d7:57:56:ef:eb:11:98:a3:1d:
         dd:54:3f:a1:54:48:e5:3c:5f:30:36:80:79:30:87:de:84:e8:
         69:3d:b8:b1:a2:e7:d7:7a:1d:d6:d6:16:22:36:93:fe:cc:c6:
         52:57:22:0a:e0:ad:82:25:10:46:bd:57:a2:f2:f0:cc:45:9e:
         ba:71:f0:1d:bc:ae:27:1b:12:b1:e2:c3:74:11:ad:38:16:21:
         18:6b:78:ef:a1:9d:b6:00:f9:8f:e7:14:54:fe:44:02:f3:74:
         80:d6:d0:1f:11:77:3a:7c:38:75:74:99:a6:ce:28:22:7d:7a:
         67:f0:6c:77:ca:bb:f2:02:80:6d:01:96:ec:66:8e:f0:d6:26:
         ec:00:83:ba:e3:03:6e:1a:f8:eb:33:7f:71:a7:12:bb:84:c6:
         36:06:43:65:f2:c8:8b:d1:ad:5b:ec:d5:67:a0:30:49:d9:da:
         18:a5:a5:ae:fa:fe:f8:d4:04:90:d1:84:e5:49:e6:b4:c9:4d:
         36:5e:30:19:2b:91:e8:d8:91:7a:bc:7a:e5:d9:cb:53:81:d1:
         6f:d5:c0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:15:15 2025 by rpki-client